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This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims; 

Claims 

1. (Currently Amended) A system for providing controlled access to an object and other 
associated information [[a]] file by a plurality of users comprising: 

means for establishing an object the object comprising distinguishable groups of data, 
each group of data having associated access criteria for access to the groups of data; 

a database for storing [an] die object and associated information, th e obj e ct comprioing 
distinguishable groups of data, oaoh group of data having associated acc e ss criteria for qcgodd to 
tho group& ^ p f - data ; 

means for establishing access criteria wherein each group of data has an associated user 
privilege for identifying separate groups of information to which user may have access to the 
groups of data and setting a user's ID including defining which users are allowed to access the 
object and associated inf ormation and associated user privileges: 

a central processing unit (CPU) for controlling the access to the database in accordance 
with the access criteria : a memory for storing software code for controlling the operation of the 
CPU; 

a cache memory for storing user IP's: a cache memory for storing user access criteria: 

and 

access application code stored in the memory and executable by the CPU, the application 
code being responsive to the user ID and user a ccess criteria associated with the groups of data 
contained within an object and to predetermined privileges for allowing controlled access to 
individual groups of data contained within the object by an individual user according to the user's 
access privileges, thereby transmitting a redacted object to the user wherein transmitting a 
redacted object includes sending an electronic object to the user that contains the groups of 
information to which the u ser has access to and that excludes groups of informati on to which the 
user does not have access. 
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2. (Original) A system according to claim 1, wherein access includes the ability of a user to read 
the contents of the requested object. 

3. (Original) A system according to claim 2, wherein access includes the ability to modify the 
contents of the requested object. 

4. (Original) A system according to claim 3, wherein the ability to modify includes the ability to 
delete information contained in the requested object. 

5. (Original) A system according to claim 3, wherein the ability to modify includes the ability to 
add data to the requested object. 

6. (Original) A system according to claim 1 wherein the access is determined by a business 
relationship to produce products and defined by the host according to the need of information in 
the product chain. 

7. (Currently Amended) A method of controlling access to objects stored in electronic 
form, comprising: 

establishing an object including loading information into the object into separate groups 
having separate privilege access criteria; 

storing [[flftft the object, the object comprising distinguishable groups of data; 

establishing access criteria, wherein each group of data having an associated user 
privilege including identifying separate groups of information to which the user may have access 
criteria for access to the groups of data; 

setting a user's ID including defining which users are allowed to access the object and 
associated information and user privileges; 

controlling the access to the database using a central processing unit (CPU) according to 
the access criteria; 

storing software code for controlling the operation of the CPU in memory; and 
verifying a user's user privilege access criteria including extracting the user's user 
identification from the object request, verifying first In cache memory and if not in cache then in 
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main memory the user's user identification and identifying the groups of data to which the user 
has access and privileges with respect t hereto thereby allowing controlled access to individual 
groups of data contained within the object by an individual user according to the user's privileges 
in response to the access criteria associated with the groups of data contained within an object 
and to predetermined privileges upon verification of user ID and user privileges, searching first 
in cache and if not found in memory then in main memory and retrieving the data requested 
according to the user's access criteria and transmitting a redacted object to the user, wherein 
transmitting a redacted object includes sending an electronic object to the user that contains the 
groups of information to which the user has access to and that excludes groups of information to 
which the user does not have access. 

8 -12 (Canceled) 

13. (Currently Amended) A computer program product for use with a computer system, a central 
processing unit and means coupled to the central processing unit for storing a database to 
automatically manage objects for viewing and marking an object having varying formats without 
the use of any originating application of a file to view the object, comprising: 

computer readable code means for establishing an object in a storage location including 
loading information into the object into separate groups having separate privilege access criteria: 

Storing the object, the object comprising distinguishable groups of data : 

computer readable code means for identifying a user to have access to the object; 
computer readable code means for establishing privilege access criteria that define the scope of 
access of the object for the user whereby each group of data has an associated user privilege that 
define the scope of access of the object for the user: including identifying separate groups of 
information to which the u ser may have access criteria for access to the groups of data: setting a 
user's ID including defining which users are allowed to access the object and associated 
information a nd user privileges; 

computer readable code means for receiving an object request by a user roquootor ; 
computer readable code means for verifying the user's user privilege access criteri a including 
extracting the user's user identification from the object request verifying first in cache memory 
and if not in cache then in main memory the user's use r identification and identifying the group s 
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of data to which the user has access and privileges with resoect thereto thereby allowing 
controlled access to individual groups of data contained within the object by an individual user 
according to the user's privileges in response to the access criteria associated with the groups of 
data contained within an object and to predetermined privileges upon verification of user ID and 
user privileges, searching first in cache and if not found in memory then in main memory and 
retrieving the data requested according to the user's access criteria : and 

computer readable code means for transmitting a redacted document according to the 
user's r e questor's user privilege access criteria including sending an electronic object to the user 
that contains the groups of information to which the user has access to and that excludes groups 
of information to which the user does not have access . 

14. (Currently Amended) A computer program device* comprising: 

a computer program storage device readable by a digital processing apparatus; 
a program stored on the program storage device and including instructions executable by 
the digital processing apparatus for controlling the apparatus to perform a method of managing 
documents for viewing and marking an object having varying formats without the use of any 
originating application of a file to view the object stored in the file, comprising: 

establishing an object in a storage location including loading information into the object 
into separate groups having separate privilege access criteria: 

storing the object, the object comprising distinguishable groups of data : 
identifying a user to have access to the object; establishing privilege access criteria that 
define the scope of access of the object for the user; 

receiving [[a]] an object request by a user r e qu es tor ; verifying the user's r e questor's user 
privilege access criteria including extracting the user's user identification from the object request, 
verifying first in cache memory and if not in cache then in main memory the user T s user 
identification and identifying the groups of data t o which the user has access and privileges with 
respect thereto thereby allowing controlled access to individual groups of data contained within 
the object bv an individual user according to the user's privileges in response to the access 
criteria associated with the groups of data contained within an object and to predetermined 
privileges upon verification of user ID and user privileges, searching first in cache and if not 
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found in memory then in main memory and retrieving the data requested according to the user's 
acce$$ criteria ; and 

transmitting a redacted object according to the user's roquootor'Q user privilege access 
criteria including sending an electronic object to the user that contains the groups of information 
to which the user has access to and that excludes groups of information to which the user does 
not have access . 

15. (Currently Amended) In a computer server having a data base for storing data pertaining to 
product information, a method of securely transferring data between a source and an access 
destination comprising: 

establishing an object in a storage location including loading information into the object 
into separate groups havine separate privilege access criteria; 

storing the object, the object comprising distinguishable groups of data, identifying a user 
to have access to the object; 

establishing privilege access criteria wherein each group of data has an associated user 
privilege that define the scope of access of the object for the use n including identifying separate 
groups of information to which the user may have access criteria for access to the groups of data: 
setting a user's ID including defining which users are allowed to access the object and associated 
information and user privileges: receiving a object request by a user c e qu e stor ; verifying.the . 
user's requ e stors user privilege access criteria including extracting the user's user identification 
from the object request, verifying first in cache memory and if not in cache then in main memory 
the user's user identification and identifying the groups of data to which the user has access and 
privileges with respect t hereto thereby allowing controlled access to individual groups of data 
contained within the object by an individual user according to the user's privileges in response to 
the access criteria associated with the groups of data contained within an object and to 
predetermi ned privileges upon verification of user ID and user privileges, searching first in 
cache and if not found in memory then in main memory and retrieving the data requested 
according to the user's access criteria : and transmitting a redacted object according to the user's 
re qu e stor's user privilege access criteria including sending an electronic object to the user that 
contains the groups of information to which the user has access to and that excludes groups of 
information to which the user does not have access. 
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16. (Newly Added) The system of claim 1 further including means for sending an electronic 
object to the user that contains the groups of information to which the user has access to and that 
excludes groups of information to which the user does not have access. 
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